$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: 87qbJbB77iqr8VbPCElTZ3MN0gqgUHyKIFV2CyRYUsQ= Subject key identifier: EF:62:2B:F0:8A:BE:57:16:AA:5A:1C:C2:0C:AE:0E:6B:12:C0:E0:12 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 43905D7E9A34A19F091884AF3A49EC031E32B0F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 015B Signing time: Thu 08 May 2025 16:21:21 +0000 Manifest this update: Thu 08 May 2025 16:16:21 +0000 Manifest next update: Sun 11 May 2025 19:04:21 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: kGG7nJjP2oBsJUOvuFTe9Z/67sfe79YIZpneW74S8Po=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:90:5d:7e:9a:34:a1:9f:09:18:84:af:3a:49:ec:03:1e:32:b0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: May 8 16:16:21 2025 GMT Not After : May 11 19:04:21 2025 GMT Subject: CN=EF622BF08ABE5716AA5A1CC20CAE0E6B12C0E012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:aa:6a:fa:94:09:7d:5f:9d:a7:81:25:d9: 4e:35:28:ac:14:86:a9:83:9c:8f:10:db:3c:82:6f: a0:a7:6f:6a:e6:f1:76:8f:02:af:26:14:86:1e:9d: 49:e4:db:e9:ad:39:18:34:07:09:2e:a1:57:4f:56: 75:bf:20:0f:61:5c:e6:17:39:09:0d:3d:2e:5e:68: a2:70:79:49:12:ba:12:21:bb:bf:fe:62:9d:1a:73: d9:ca:9d:9e:f3:52:58:07:d4:68:c2:4c:76:89:f9: 53:aa:57:cb:3f:fa:e0:55:14:73:ff:cd:35:d5:71: 6d:fb:ce:8d:e4:bd:3a:3d:b0:7a:c2:ce:a8:65:a4: 97:30:88:f4:2a:c2:31:14:c8:0c:dc:68:ea:28:cc: 8c:e2:e2:26:39:4d:2d:2d:cd:de:30:45:c3:0b:91: 7b:d3:59:7a:d0:9e:a6:1b:84:bd:8c:1d:9d:28:08: 0c:d8:7b:0c:9f:47:e6:ae:97:96:0b:bb:a2:e8:78: aa:01:1c:2c:0b:36:60:43:54:bb:69:aa:18:4f:78: 6c:11:90:3e:20:0d:06:1f:0c:31:7c:b8:c6:10:35: d2:7a:14:2c:dd:39:89:d0:16:c5:ce:bd:2f:f4:d7: f2:76:22:fc:28:e9:4e:ab:bf:dd:7c:a3:4d:57:f1: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:62:2B:F0:8A:BE:57:16:AA:5A:1C:C2:0C:AE:0E:6B:12:C0:E0:12 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2b:c7:85:90:1e:68:31:96:92:81:40:96:79:bb:ef:39:cb: 96:f6:6c:e9:e1:8b:a7:57:4e:9b:70:c2:02:1b:0c:ae:b7:3f: 8f:b7:bf:17:eb:7a:51:ca:1b:75:64:e7:d1:51:48:c4:22:cb: fb:75:be:d7:e4:d3:f5:23:30:12:92:d3:a1:33:29:98:dd:8e: 41:ef:4b:0e:a2:c7:ca:f9:3c:f0:e7:5d:4a:c5:95:07:12:7a: c1:74:77:aa:fb:93:c9:fb:21:eb:48:6a:98:9f:ed:bd:ff:f4: fe:f2:d7:5c:05:5b:e7:da:bf:08:a9:5e:e8:31:f5:02:a4:02: ab:f7:ef:c9:db:87:1a:58:a7:6d:35:64:e7:1a:67:c0:83:2c: dd:cc:92:85:79:58:7c:68:68:ce:b4:b4:c3:63:62:30:13:16: e5:6b:37:ed:d7:20:97:75:5a:c8:ec:7b:b4:a1:1f:7c:3c:bc: 12:fd:e9:74:86:c5:0e:45:c7:f6:ae:fd:9b:14:8b:47:88:6e: 16:47:72:5d:cb:a0:2e:a0:c2:4c:7e:2d:e3:69:89:6e:95:d9: 53:16:6e:11:35:8c:a9:a2:55:0c:17:37:11:eb:70:4d:99:16: 99:41:6f:44:03:a3:0e:bb:3b:73:3c:32:2e:89:cb:54:57:13: 07:a0:7d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5Bdfpo0oZ8JGISvOknsAx4ysPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTA1MDgxNjE2MjFaFw0yNTA1MTExOTA0MjFaMDMxMTAvBgNV BAMTKEVGNjIyQkYwOEFCRTU3MTZBQTVBMUNDMjBDQUUwRTZCMTJDMEUwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iapq+pQJfV+dp4El2U41KKwU hqmDnI8Q2zyCb6Cnb2rm8XaPAq8mFIYenUnk2+mtORg0BwkuoVdPVnW/IA9hXOYX OQkNPS5eaKJweUkSuhIhu7/+Yp0ac9nKnZ7zUlgH1GjCTHaJ+VOqV8s/+uBVFHP/ zTXVcW37zo3kvTo9sHrCzqhlpJcwiPQqwjEUyAzcaOoozIzi4iY5TS0tzd4wRcML kXvTWXrQnqYbhL2MHZ0oCAzYewyfR+aul5YLu6LoeKoBHCwLNmBDVLtpqhhPeGwR kD4gDQYfDDF8uMYQNdJ6FCzdOYnQFsXOvS/01/J2Ivwo6U6rv918o01X8dIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU72Ir8Iq+VxaqWhzCDK4OaxLA4BIwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4rx4WQHmgxlpKBQJZ5u+85y5b2bOnhi6dX TptwwgIbDK63P4+3vxfrelHKG3Vk59FRSMQiy/t1vtfk0/UjMBKS06EzKZjdjkHv Sw6ix8r5PPDnXUrFlQcSesF0d6r7k8n7IetIapif7b3/9P7y11wFW+favwipXugx 9QKkAqv378nbhxpYp201ZOcaZ8CDLN3MkoV5WHxoaM60tMNjYjATFuVrN+3XIJd1 Wsjse7ShH3w8vBL96XSGxQ5Fx/au/ZsUi0eIbhZHcl3LoC6gwkx+LeNpiW6V2VMW bhE1jKmiVQwXNxHrcE2ZFplBb0QDow67O3M8Mi6Jy1RXEwegfTU= -----END CERTIFICATE-----Generated at Fri May 9 23:51:02 2025 by rpki-client